Prompting for Regular Password Changes through Mac Mail?

[Mac_Ma]

I have googled this til my fingers bled (okay, not really, but I have done a lot of research) and I can’t find this issue documented. Maybe it’s just something I’m not configuring properly?

We have a small company, few staff and three servers: file server, web/email server, and database (Filemaker) server. File and web/email are running Server 10.5.8, and the database server is running 10.6.7.

I am running OD on all of the servers, but I do not have one central database, each server is running its own standalone OD for various reasons.

For security reasons, we must have our users reset passwords every 90 days on all of the servers. I have each OD set up for the proper PW policy.

After 90 days, or if pw is to be set on next login, logging into the file server via AFP prompts and presents a dialogue box to make the changes. The database server rejects the password but provides a “change password” button in the login box. Users can reset their own passwords just fine.

Accessing mail through the mail server (when a pw change is required) only elicits an error message that the password is incorrect, but not any mechanism by which the user can change the pw themselves. IF I enable AFP on that server, and IF the users log into the server via AFP, they receive the prompt as they do on the file server and are able to reset the pw on their own. But I do not have AFP enabled on that machine, and that is not a good workaround for me. If I disable the need to reset the password, there is no issue, but of course, they are never prompted for a reset. I have to have them use my laptop and type their pw into the OD interface every 90 days. NOT convenient!

How can I have the password reset prompts come up when accessing the email service, and also a mechanism for the user to change their password on their own?

Thank you in advance for any insight!

[Author]

Posts